This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa File: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (raw, json) Hash identifier: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU= Subject key identifier: 5A:37:59:46:77:E9:7E:22:BB:10:F7:13:1C:DE:93:FC:76:E1:8B:68 Certificate issuer: /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c Certificate serial: 019B797E7D6E89F0A35CCA0D1BCD94A3DA23 Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa Signing time: Thu 01 Jan 2026 12:18:11 +0000 ROA not before: Thu 01 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197697 IP address blocks: 95.156.240.0/21 maxlen: 22 95.214.4.0/22 maxlen: 23 185.54.56.0/22 maxlen: 23 185.122.96.0/22 maxlen: 23 185.122.104.0/22 maxlen: 23 192.162.92.0/22 maxlen: 23 193.186.204.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7d:6e:89:f0:a3:5c:ca:0d:1b:cd:94:a3:da:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a37594677e97e22bb10f7131cde93fc76e18b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0f:95:56:5a:07:d2:1d:b0:96:04:f8:ab:5d: 8a:cb:c1:ac:4b:c9:53:0f:c6:6d:08:cd:48:00:a2: 69:8f:6d:47:24:ef:03:df:dd:0e:2e:c3:89:a0:f2: 4f:eb:69:4f:74:42:92:28:f5:d7:ac:79:24:64:96: fe:f1:c8:86:15:44:43:f4:fa:77:ce:93:1c:ba:5f: e2:d5:a0:03:69:7f:93:48:0e:17:ba:65:57:84:f2: a4:6d:38:59:96:9d:ea:a2:92:de:4c:05:bc:61:f1: ac:e4:90:18:34:d9:db:78:11:18:a1:31:4f:ae:5e: 8f:b2:3f:48:0e:fa:32:76:f6:57:79:ed:e2:5c:28: ae:bf:87:c5:47:32:be:ed:9a:be:9c:71:f8:e8:a4: a1:1e:da:4c:83:95:1a:82:c9:d8:46:63:2e:59:93: 75:33:78:51:2d:08:d7:9f:00:d5:ec:44:a7:b8:1e: 7d:98:1a:c9:44:11:b4:fa:28:50:16:d6:58:41:62: ca:15:5e:4b:c4:34:4b:ff:bc:df:f5:39:47:80:40: 2d:5f:43:27:03:b0:93:e9:b5:e7:fc:0e:f1:cb:73: 54:b1:1e:99:38:80:6c:65:a6:1f:47:6e:63:d5:9e: 03:43:ca:f2:a0:11:52:5d:32:77:af:cb:79:40:05: e6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:37:59:46:77:E9:7E:22:BB:10:F7:13:1C:DE:93:FC:76:E1:8B:68 X509v3 Authority Key Identifier: keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.156.240.0/21 95.214.4.0/22 185.54.56.0/22 185.122.96.0/22 185.122.104.0/22 192.162.92.0/22 193.186.204.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:07:0f:07:d6:62:2a:6b:f7:69:5b:54:c2:0b:95:c9:c7:86: 85:36:92:e9:14:b4:76:e7:e7:40:7f:19:ef:f3:ae:53:79:50: 26:70:fb:b5:10:76:4b:0b:74:3b:d2:b0:9e:93:fc:56:56:21: 17:b7:36:aa:5c:bc:d6:23:cf:12:37:1e:5b:4d:f9:69:0c:8d: 06:a7:c6:f5:35:a6:aa:a7:22:93:52:04:7c:e0:8f:a0:b0:3f: 77:2e:40:f7:47:b4:74:bd:06:9c:6a:36:6e:f7:d6:43:c4:73: 76:28:7b:74:8c:93:21:75:2d:79:f6:07:6a:b7:8d:5d:86:60: 78:94:22:90:63:7d:89:7e:a5:8a:ea:28:19:0d:87:d3:10:91: 41:21:7b:fb:49:cd:52:6a:2a:26:70:02:91:46:b4:de:64:d2: f9:0a:0b:1f:f8:07:31:5d:38:b5:fb:71:29:51:2b:80:93:fb: 0e:8d:36:23:f7:7b:ed:f8:4b:fc:13:4d:93:31:cd:89:7d:22: 91:56:4a:dc:f3:d4:b2:b8:e2:6f:38:5f:34:f7:f4:ab:52:11: 03:9b:cf:b8:1b:a6:1e:e0:33:64:00:35:79:ed:bd:75:44:5e: 12:76:42:f1:48:da:ae:10:f9:54:55:d0:82:83:1f:0f:02:36: 21:ab:b4:ca -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt5fn1uifCjXMoNG82Uo9ojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MjQ4YjUyZDIzZWJkMjM3YjhhOGI2ZTYzZWRkMDJkZmVl Zjk4NGMwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTM3NTk0Njc3ZTk3ZTIyYmIxMGY3MTMxY2RlOTNmYzc2ZTE4YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA+VVloH0h2wlgT4q12Ky8GsS8lT D8ZtCM1IAKJpj21HJO8D390OLsOJoPJP62lPdEKSKPXXrHkkZJb+8ciGFURD9Pp3 zpMcul/i1aADaX+TSA4XumVXhPKkbThZlp3qopLeTAW8YfGs5JAYNNnbeBEYoTFP rl6Psj9IDvoydvZXee3iXCiuv4fFRzK+7Zq+nHH46KShHtpMg5UagsnYRmMuWZN1 M3hRLQjXnwDV7ESnuB59mBrJRBG0+ihQFtZYQWLKFV5LxDRL/7zf9TlHgEAtX0Mn A7CT6bXn/A7xy3NUsR6ZOIBsZaYfR25j1Z4DQ8ryoBFSXTJ3r8t5QAXmMQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFFo3WUZ36X4iuxD3Exzek/x24YtoMB8GA1UdIwQY MBaAFAcki1LSPr0je4qLbmPt0C3+75hMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZWQ5YjUtOTQ0MC00ZDBiLWJlMWYt MWIyZTQxMDVlYjdlLzEvV2pkWlJuZnBmaUs3RVBjVEhONlRfSGJoaTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jZWQ5YjUtOTQ0MC00ZDBiLWJlMWYtMWIyZTQxMDVlYjdl LzEvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDX5zwAwQC X9YEAwQCuTY4AwQCuXpgAwQCuXpoAwQCwKJcAwQCwbrMMA0GCSqGSIb3DQEBCwUA A4IBAQB7Bw8H1mIqa/dpW1TCC5XJx4aFNpLpFLR25+dAfxnv865TeVAmcPu1EHZL C3Q70rCek/xWViEXtzaqXLzWI88SNx5bTflpDI0Gp8b1NaaqpyKTUgR84I+gsD93 LkD3R7R0vQacajZu99ZDxHN2KHt0jJMhdS159gdqt41dhmB4lCKQY32JfqWK6igZ DYfTEJFBIXv7Sc1SaiomcAKRRrTeZNL5Cgsf+AcxXTi1+3EpUSuAk/sOjTYj93vt +Ev8E02TMc2JfSKRVkrc89SyuOJvOF809/SrUhEDm8+4G6Ye4DNkADV57b11RF4S dkLxSNquEPlUVdCCgx8PAjYhq7TK -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:16 2026 by rpki-client